Issues

• [NREM][Space] Add Nominatim geocoding cache and rate-limit protection for multi-widget pages

  enhancementnrem:improvementnrem:spacenrem
  numbersprotocol/capture-eye#95 · Filter by author numbers-official opened on Mar 24, 2026

• [Feature] Resilient engagement zone image loading with graceful degradation

  enhancement
  numbersprotocol/capture-eye#84 · Filter by author numbers-official opened on Mar 9, 2026

• [Security] GitHub Actions workflows pin third-party actions by mutable version tags instead of commit SHAs

  bug
  numbersprotocol/capture-eye#83 · Filter by author numbers-official opened on Mar 9, 2026

• [Feature] Add runtime API response schema validation to prevent silent data corruption

  numbersprotocol/capture-eye#82 · Filter by author numbers-official opened on Mar 7, 2026

• [Security] Production release workflow publishes to NPM/S3 without running tests, risking untested code distribution

  numbersprotocol/capture-eye#81 · Filter by author numbers-official opened on Mar 7, 2026

• [Feature] Emit custom error events for host application observability

  enhancement
  numbersprotocol/capture-eye#80 · Filter by author numbers-official opened on Mar 5, 2026

• [Security] Production bundle leaks internal API structure via unstripped console.debug() calls

  bug
  numbersprotocol/capture-eye#79 · Filter by author numbers-official opened on Mar 5, 2026

• [Feature] Add in-memory asset data cache to eliminate redundant API calls on repeated modal opens

  enhancement
  numbersprotocol/capture-eye#78 · Filter by author numbers-official opened on Mar 4, 2026

• [Security] Unvalidated API-sourced URLs in href attributes enable potential javascript: protocol XSS

  bug
  numbersprotocol/capture-eye#77 · Filter by author numbers-official opened on Mar 4, 2026

• [Feature] Lazy-initialize InteractionTracker to avoid unnecessary network requests on page load

  enhancement
  numbersprotocol/capture-eye#76 · Filter by author numbers-official opened on Mar 1, 2026

• [Security] NID parameter not URL-encoded in API requests, allowing query parameter injection

  bug
  numbersprotocol/capture-eye#75 · Filter by author numbers-official opened on Mar 1, 2026

• [Feature] Add request cancellation to prevent stale data race conditions in ModalManager

  enhancement
  numbersprotocol/capture-eye#74 · Filter by author numbers-official opened on Feb 28, 2026

• [Security] Missing output escaping in Elementor widget render() and content_template()

  bug
  numbersprotocol/capture-eye#73 · Filter by author numbers-official opened on Feb 28, 2026

• [Feature] Deduplicate font-face injection to prevent redundant network requests

  numbersprotocol/capture-eye#72 · Filter by author numbers-official opened on Feb 27, 2026

• [Feature] Add error state and timeout handling for asset data loading failures

  numbersprotocol/capture-eye#69 · Filter by author numbers-official opened on Feb 25, 2026

• [Security] WordPress plugin loads JS from mutable @latest CDN tag without Subresource Integrity (SRI)

  numbersprotocol/capture-eye#68 · Filter by author numbers-official opened on Feb 25, 2026

• [Feature] Add retry limit and backoff to InteractionTracker event submission

  numbersprotocol/capture-eye#67 · Filter by author numbers-official opened on Feb 24, 2026

• [Security] Client-side API token exposed via reversible obfuscation in InteractionTracker

  numbersprotocol/capture-eye#66 · Filter by author numbers-official opened on Feb 24, 2026

• [Feature] Add WCAG 2.1 AA accessibility support (ARIA, keyboard nav, focus trap)

  enhancement
  numbersprotocol/capture-eye#65 · Filter by author numbers-official opened on Feb 23, 2026

• [Security] XSS vulnerability in WordPress Elementor widget due to unescaped output

  bug
  numbersprotocol/capture-eye#64 · Filter by author numbers-official opened on Feb 23, 2026